sentrik
Governance runtime for AI-generated code. Scan, gate, and trace compliance automatically.
npm install -g sentrik
30-Second Quickstart
# Open any project and scan — no setup needed
sentrik scan
# Enforce quality gate (exit 1 on failure)
sentrik gate
That's it. sentrik auto-detects your project, applies sensible defaults, and shows findings inline. No wizard, no config files needed.
Want to customize? Run sentrik init to generate a .sentrik/config.yaml with detected settings.
Why sentrik?
Teams using Copilot, Cursor, Claude Code, and AI coding agents generate code fast — but compliance doesn't keep up. sentrik enforces standards automatically:
- IEC 62304 for medical device software (FDA/EU MDR)
- OWASP Top 10 for web application security
- SOC2 Trust Services Criteria
- Custom rule packs for your own standards
Key Features
| Feature | Description |
|---|---|
| Zero Config | Auto-detects project, applies sensible defaults — just scan |
| Rules Engine | Regex, AST, and file-policy rules with auto-fix |
| Standards Packs | 26 pre-built packs (632 rules): IEC 62304, OWASP, SOC2, HIPAA, PCI DSS, ISO 27001, GDPR, EU AI Act, MISRA C, DO-178C, ISO 26262, and more |
| CI/CD Gate | Block non-compliant PRs in GitHub Actions, Azure Pipelines, or GitLab CI |
| PR Decoration | Compliance summary + findings as PR comments on GitHub and Azure DevOps |
| Work Item Traceability | Link findings to Azure DevOps, GitHub Issues, or Jira |
| Reconciliation | Auto-create/update/close work items from scan results |
| Management Dashboard | Web UI for findings, rules, packs, audit log |
| REST API | 120+ endpoints for remote scanning and integration |
| Reports | HTML, JUnit XML, SARIF, CSV, compliance reports, trust center |
| Continuous Monitoring | sentrik watch — file-change detection and periodic scanning |
| Confidence Scoring | Variable confidence based on code context; opt-in LLM re-scoring (provider-agnostic: Anthropic, OpenAI, Ollama) |
| VS Code / Cursor | Auto-scan on save, inline findings, zero setup |
| Claude Code | sentrik claude-init — onboarding interview, 26 MCP tools, scan-on-edit feedback into the conversation |
Installation
npm install -g sentrik
Downloads a platform-specific binary. No Python, no Docker, no extra dependencies. Works on macOS, Linux, and Windows.
CI/CD Integration
GitHub Actions
- name: sentrik Gate
run: |
npm install -g sentrik
sentrik gate --git-range "origin/main...HEAD" --decorate-pr --status-check
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Azure Pipelines
- script: |
npm install -g sentrik
sentrik gate --git-range "origin/main...HEAD" --decorate-pr --status-check
env:
AZURE_DEVOPS_PAT: $(AZURE_DEVOPS_PAT)
GitLab CI
sentrik-gate:
stage: compliance
image: python:3.12-slim
before_script:
- pip install sentrik
script:
- sentrik gate --git-range "origin/$CI_MERGE_REQUEST_TARGET_BRANCH_NAME...HEAD"
artifacts:
reports:
junit: out/findings.junit.xml
Management Dashboard
Start the API server and open the dashboard:
sentrik dashboard
The dashboard provides:
- Scan metrics and severity charts
- Searchable/filterable rule browser
- Standards pack management
- Work items with DevOps sync
- Governance policy configuration
- Audit log timeline
Enterprise Features
Unlock advanced capabilities with a license key from sentrik.dev:
sentrik license # Check your current license status
| Feature | Community (Free) | Team | Organization | Enterprise |
|---|---|---|---|---|
| Scan & gate | Yes | Yes | Yes | Yes |
| Dashboard + API | Yes | Yes | Yes | Yes |
| Standards packs | 6 (193 rules) | 20 (512 rules) | 26 (632 rules) | 26 (632 rules) |
| Custom standards packs | 5 | 25 | 100 | Unlimited |
| Work item reconciliation | - | Yes | Yes | Yes |
| Priority support | - | Yes | Yes | Yes |
| Parallel scanning | - | - | Yes | Yes |
| Severity rescoring | - | - | Yes | Yes |
| OAuth integration | - | - | Yes | Yes |
| Governance profiles | - | - | Yes | Yes |
| Audit logging | - | - | Yes | Yes |
| Async approval gates | - | - | - | Yes |
Paid tiers are available by contacting hello@sentrik.dev.
Configuration
sentrik auto-detects your project and works without config. To customize, create .sentrik/config.yaml:
output_dir: out
standards_packs:
- owasp-top-10
gate_fail_on:
- critical
- high
reporters:
- html
- sarif
devops_provider: github # stub, azure, github, jira
Legacy .guard.yaml files are still supported. Migrate with sentrik migrate.
Environment variables override config values — see documentation for the full list.
Standards Packs
sentrik list-packs # See available packs
sentrik add-pack fda-iec-62304 # Enable a pack
sentrik add-pack owasp-top-10 # Enable another
All 26 packs (632 rules total):
| Pack | Rules | Standard | Tier |
|---|---|---|---|
owasp-top-10 |
69 | OWASP Top 10 2021 | Free |
soc2 |
30 | SOC2 Trust Services Criteria | Free |
python-security |
18 | Python Security | Free |
go-security |
15 | Go Security | Free |
supply-chain-security |
26 | SLSA / NIST SSDF / CISA | Free |
cpp-coding-standards |
35 | Modern C/C++ Safety | Free |
fda-iec-62304 |
31 | IEC 62304 / 21 CFR Part 11 | Team |
hipaa |
25 | HIPAA Security Rule | Team |
pci-dss |
33 | PCI DSS v4.0 | Team |
iso-27001 |
32 | ISO 27001:2022 | Team |
gdpr |
25 | EU GDPR | Team |
nist-800-53 |
21 | NIST SP 800-53 Rev 5 | Team |
cmmc |
19 | CMMC 2.0 | Team |
nist-ai-rmf |
16 | NIST AI RMF (AI 600-1) | Team |
eu-ai-act |
23 | EU Artificial Intelligence Act | Team |
php-security |
15 | PHP/Laravel Security | Team |
kotlin-security |
12 | Kotlin/Android/Spring Boot | Team |
cloud-iac |
30 | Terraform / Cloud IaC Security | Team |
java-security |
19 | Java / Spring Security | Team |
csharp-security |
18 | C#/.NET / ASP.NET Security | Team |
iec-81001-5-1 |
20 | Health Software Cybersecurity | Org |
fda-21cfr11 |
16 | 21 CFR Part 11 Electronic Records | Org |
iso-14971 |
18 | Medical Device Risk Management | Org |
misra-c |
21 | MISRA C/C++ | Org |
do-178c |
22 | Airborne Systems Software | Org |
iso-26262 |
23 | Automotive Functional Safety | Org |
Links
License
Proprietary. See LICENSE for details. Free tier available with no limits on core features.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file sentrik-1.5.119.tar.gz.
File metadata
- Download URL: sentrik-1.5.119.tar.gz
- Upload date:
- Size: 2.8 MB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.12.10
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
1d606fe868437dffef15a8b53d6181543c7e9dbfdc12e13c10452f2f34027e0d
|
|
| MD5 |
234c76cc26f29f72d8b9514a95364d00
|
|
| BLAKE2b-256 |
b89faec74cf655942d0406f491e613d2c277559cf5633cbf02691b6e2dbb8537
|
File details
Details for the file sentrik-1.5.119-py3-none-any.whl.
File metadata
- Download URL: sentrik-1.5.119-py3-none-any.whl
- Upload date:
- Size: 914.4 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.12.10
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
e7fa6d9e135157045d2aa95bff90aa518630040ef9cc4bed3754729349b24b77
|
|
| MD5 |
b6f11e5476eb881acfdd16609429fda0
|
|
| BLAKE2b-256 |
5a8efaf14afbb684a2fc334744f806e90c38823af6f60656496cae50cfcf42d9
|
